Project

General

Profile

Configuring Roles » History » Version 6

Luke Murphey, 08/13/2012 06:50 AM

1 1 Luke Murphey
h1. Configuring Roles
2 1 Luke Murphey
3 3 Luke Murphey
By default, successfully authenticated users are assigned the "user" role. However, this can be overridden by creating a vendor specific attribute. The attribute should contain a string containing a colon or comma separated list of roles (like "admin:can_delete"). Re-run setup on the RADIUS auth app and configure the app to use the vendor code and vendor attribute ID you defined.
4 3 Luke Murphey
5 6 Luke Murphey
If you are not sure what the attribute ID and vendor code being provided by the server is, run the following search after authenticating to see what attributes the app is receiving:
6 6 Luke Murphey
7 6 Luke Murphey
    index=_internal "Received the following fields upon login" sourcetype="radius_auth" 
8 6 Luke Murphey
9 6 Luke Murphey
h1. Configuring IAS (Microsoft Internet Authentication Service)
10 6 Luke Murphey
11 6 Luke Murphey
Below are instructions for configuring IAS.
12 1 Luke Murphey
13 1 Luke Murphey
h2. Open the IAS MMC Snap-In
14 1 Luke Murphey
15 1 Luke Murphey
Start the "mmc"
16 1 Luke Murphey
17 1 Luke Murphey
!Open_mmc_snap_in.png!
18 1 Luke Murphey
19 1 Luke Murphey
h2. Open the Remote Access Policy
20 1 Luke Murphey
21 4 Luke Murphey
Selected "Remote Access Policies" and open the appropriate policy. Then press the "Edit Profile" button and then click the "Advanced" tab.
22 1 Luke Murphey
23 1 Luke Murphey
!Select_policy.png!
24 1 Luke Murphey
25 1 Luke Murphey
h2. Create a New Attribute
26 1 Luke Murphey
27 4 Luke Murphey
Press the "Add" button and create a new attribute with a name of "Vendor-Specific" and a vendor of "RADIUS Standard".
28 1 Luke Murphey
29 1 Luke Murphey
!Select_attribute.png!
30 1 Luke Murphey
31 4 Luke Murphey
Press "Add" under the list of attribute values. Set the vendor code to 27389 and click the radio button for "Yes. It conforms".
32 4 Luke Murphey
33 4 Luke Murphey
!Set_vendor_code.png!
34 4 Luke Murphey
35 5 Luke Murphey
Click "Configure Attribute" to edit the value. Set the "Vendor assigned attribute number" to 1. Select a format of string and set the value to a colon separated list of roles.
36 1 Luke Murphey
37 1 Luke Murphey
!Edit_attribute.png!
38 1 Luke Murphey
39 1 Luke Murphey
The created attribute should look something like this:
40 1 Luke Murphey
41 1 Luke Murphey
!List_attributes.png!